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1 DETAILED ACTION 

2 

3 This action is in response to the communication filed on 3/20/2007. 

4 Claims 51 - 65 are pending, 

5 All objections and rejections not set forth below have been withdrawn. 
6 

7 Drawings 

8 

9 The drawings are objected to under 37 CFR 1.83(a). The drawings must show 

10 every feature of the invention specified in the claims. Therefore, "receiving a 

1 1 request... over a -bus external to the bridge from a source remote from the computer 

12 system" must be shown or the feature(s) canceled from the claim(s). No new matter 

13 should be entered. 

14 Corrected drawing sheets in compliance with 37 CFR 1.121(d) are required in 

15 reply to the Office action to avoid abandonment of the application. Any amended 

16 replacement drawing sheet should include all of the figures appearing on the immediate 

1 7 prior version of the sheet, even if only one figure is being amended. The figure or figure 

18 number of an amended drawing should not be labeled as "amended." If a drawing figure 

19 is to be canceled, the appropriate figure must be removed from the replacement sheet, . 

20 and where necessary, the remaining figures must be renumbered and appropriate 

21 changes made to the brief description of the several views of the drawings for 

22 consistency. Additional replacement sheets may be necessary to show the renumbering 
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1 of the remaining figures. Each drawing sheet submitted after the filing date of an 

2 application must be labeled in the top margin as either "Replacement Sheet" or "New 

3 Sheet" pursuant to 37 CFR 1.121(d). If the changes are not accepted by the examiner, 

4 the applicant will be notified and informed of any required corrective action in the next 

5 Office action. The objection to the drawings will not be held in abeyance. 
6 

7 Specification 

8 

9 The specification is objected to as failing to provide proper antecedent basis for 

10 the claimed subject matter. See 37 CFR 1.75(d)(1) and MPEP § 608.01 (o). Correction 

1 1 of the following is required: 

12 The specification fails to provide proper antecedent basis for the recitations of 

13 "receiving a request... over a bus external to the bridge from a source remote from the 

14 computer system" [or substantially similar] as found within claims 51 - 65. 
15 

16 Claim Rejections - 35 USC §112 

17 

1 8 The following is a quotation of the first paragraph of 35 U.S.C. 112: 

1 9 The specification shall contain a written description of the invention, and of the manner and process of 

20 making and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the 

21 art to which it pertains, or with which it is most nearly connected, to make and use the same and shall 

22 set forth the best mode contemplated by the inventor of carrying out his invention. 
23 

24 Claims 51 - 65 are rejected under 35 U.S.C. 112, first paragraph, as failing 

25 to comply with the written description requirement. The claim(s) contains subject 
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1 matter which was not described in the specification in such a way as to reasonably 

2 convey to one skilled in the relevant art that the inventor(s), at the time the application 

3 was filed, had possession of the claimed invention. Applicant has not pointed out where 

4 the amended claim is supported, nor does there appear to be a written description of 

5 the claim limitations in the application as filed (see above objection to the specification). 
6 



7 Claim Rejections - 35 USC § 101 

8 

9 35 U.S.C. 101 reads as follows: 

1 0 Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 

1 1 matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 

1 2 conditions and requirements of this title. 
13 

14 Claims 61 - 65 are rejected under 35 U.S.C. 101 because the claimed 



15 invention is directed to non-statutory subject matter. Specifically, these claims 

16 recite instructions embodied within a signal (see for example - "transmission medium", 

17 applicant's disclosure pg. 29). As a signal encoded with descriptive material fails to falls 

18 within one of the four statutory categories of invention, these claims are rejected as 

19 nonstatutory. 
20 



21 Claim Rejections - 35 USC § 102 

22 

23 The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 

24 form the basis for the rejections under this section made in this Office action: 

25 A person shall be entitled to a patent unless - 
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1 (e) the invention was described in (1) an application for patent, published under section 122(b), by 

2 another filed in the United States before the invention by the applicant for patent or (2) a patent 

3 granted on an application for patent by another filed in the United States before the invention by the 

4 applicant for patent, except that an international application filed under the treaty defined in section 

5 351 (a) shall have the effects for purposes of this subsection of an application filed in the United States. 

6 only if the international application designated the United States and was published under Article 21 (2) 

7 of such treaty in the English language. 
8 

9 Claims 51, 52, 54, 56, 57, 59, 61, and 64 are rejected under 35 U.S.C. 102(e) 
10 as being anticipated by Heinrich et al. (Heinrich), U.S. Patent 6,199,167. 

11 

12 Regarding claim 51, Heinrich discloses: 

1 3 receiving a request for an authentication at a microcontroller included in a bridge 



14 over a bus external to the bridge from a source remote from the computer system; 

1 5 requesting security data from a security device; receiving the security data from the 

1 6 security device, at the microcontroller (2: 1 -45; 3: 51 -59; fig. 1:11 0-1 20 - as shown, the 

17 source is external to the computer system). 



1 8 evaluating the security data; and approving the authentication at the 

1 9 microcontroller responsive to the security data being evaluated as acceptable (3:51 -59; 

20 fig. 1:110-120; 3:65-4:2). 
21 

22 Regarding claim 52, Heinrich discloses: 

23 disapproving the authentication at the microcontroller responsive to the security 

24 data being evaluated as unacceptable (3:65-4:2). 
25 

26 Regarding claim 54, the combination of Heinrich discloses: 
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1 wherein requesting security data from a security device comprises requesting the 

2 security data from the security device over a direct connection between 'the security 

3 device and the microcontroller; and wherein receiving the security data from the security 

4 device, at the microcontroller, comprises receiving the security data from the security 

5 device over the direct connection to the microcontroller (fig. 3:204, 203). 
6 

7 Regarding claims 56, 57, 59, 61 , and 64, they are the method steps and method 

8 implemented on computer readable medium claims corresponding to the method claims 

9 above, and are rejected, at least, for the same reasons. 
10 

11 

1 2 Claim Rejections - 35 USC § 103 

13 

14 The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

1 5 obviousness rejections set forth in this Office action: 

16 (a) A patent may not be obtained though the invention is not identically disclosed or described as set 

17 forth in section 102 of this title, if the differences between the subject matter sought to be patented and 

1 8 the prior art are such that the subject matter as a whole would have been obvious at the time the 

1 9 invention was made to a person having ordinary skill in the art to which said subject matter pertains. 

20 Patentability shall not be negatived by the manner in which the invention was-made. 
21 

22 

23 Claims 53, 55, 58, 60, 63, and 65 are rejected under 35 U.S.C. 103(a) as 

24 being unpatentable over Heinrich. 

25 

26 Regarding claims 55, 60, and 65, Heinrich discloses the submission of 

27 authentication data by the user and that the user input may comprise biometric data (fig. 
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1 1:120; 2:16-37). White Heinrich discloses evaluating user input for authentication, 

2 Heinrich does not contain an explicit statement that when the user input comprises 

3 biometric information, the biometric information is evaluated. However, it would have 

4 been obvious to one of ordinary skill in the art to recognize the need to evaluate the 

5 biometric information when the user, desiring authentication, submits biometric 

6 information. This would have been obvious as one of ordinary skill in the art would have 

7 been motivated by the ability to reason logically that whenever biometric information is 

8 submitted by a user desiring authentication, then this type of information should be 

9 evaluated. 
10 

1 1 Regarding claims 53, 58, and 63, Heinrich does not explicitly state wherein 

1 2 evaluating the security data comprises requesting an indication of acceptability inside 

13 SMM. However, Heinrich discloses that for purposes of security, systems operate 

14 within SMM (1:35-42; 4:3-28). Heinrich clearly enables for SMM to be apart of system 

15 operation and for his method of verification as an enhancement to existing security 

16 features. 
17 

18 Claims 51, 52, 54 - 57, 59 - 62, 64, and 65 are rejected under 35 

19 U.S.C. 102(e) as being anticipated by Flyntz, "Multi-Level Secure Computer With 

20 Token-Based Access Control", U.S. Patent 6,389,542 in view of Angelo, "Method 

21 and Apparatus for Allowing Access to Secured computer Resources by Utilizing a 

22 Password and an External Encryption Algorithm", U.S. Patent 5,949,882. 



Application/Control Number: 10/084,596 Page 8 

Art Unit: 2137 

1 

2 Regarding claim 51 , Flyntz discloses: 

3 receiving a request for an authentication at a microcontroller, requesting security 

4 data from a security device; receiving the security data from the security device, at the 

5 microcontroller (Flyntz,. col. 2, lines 52-56; col. 15, lines 5-20, 33-36, 53-55). Flyntz 

6 discloses that a user requests authentication by supplying security data to the 

7 microcontroller, which in turn processes such security data to evaluate acceptance. 



8 evaluating the security data; and approving the authentication at the 

9 microcontroller responsive to the security data being evaluated as acceptable (Flyntz, 

10 col. 10, lines 33-40; col. 15, lines 21-65). 

1 1 Flyntz discloses a microcontroller, serving to control the connection of the CPU to 



12 devices located on system buses (Flyntz, fig. 2; col. 5, line 61 - col. 6, line 25; col. 15, 

13 lines 21-32). The system of Flyntz allows for the provision of power to secure system 

14 portions after a positive indication of acceptability has been received (Flyntz, Abstract; 

15 col. 1, lines 55-63). The microcontroller receives a request for authentication via 

16 connection to a security device (Flyntz, fig. 2:31). Flyntz, however, does not disclose 

1 7 the microcontroller as included in a bridge. 



18 Like Flyntz, Angelo discloses controlling circuitry to implement a secure power up 

19 procedure for providing power to system portions on system buses, upon permission for 

20 authorized users (Angelo, Abstract; col. 6, lines 44-50; col. 11, lines 17-45). Angelo 

21 specifically discloses that the controlling circuitry used to accomplish this procedure is 

22 included in the bridge, thus allowing the system to control the connection of the CPU to 
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1 devices located on system buses (Angelo, fig. 1-130; col. 5, lines 1-30). The inclusion 

2 of the above mentioned security features within the bridge allows for increased 

3 hardware security, as security data may be entered via a secure communication path to 

4 the bridge after a request for authentication has been received (Angelo, 2:39-43; 1 1 :64- 

5 12:9). 

6 It would have been obvious to one of ordinary skill in the art to employ the secure 

7 bridge implementation of Angelo for connecting devices on system buses along with the 

8 security microcontroller of Flyntz for connecting devices on system buses. This would 

9 have been obvious because one of ordinary skill in the art would have been motivated 

10 by the showing of prior art that the above mentioned security features need not be 

1 1 constructed as separate system components, but rather, may be feasibly included 

12 within the existing computer system's bridge, thereby allowing the secure connection of 

13 the CPU to devices located on buses (Angelo, fig. 2-130; col. 2, lines 39-43; 5:13-26; 

14 10:33-54), as well as increased hardware security. 

15 The combination of Flyntz and Angelo discloses the request being received from 

16 a bus external to the bridge from a source remote from the computer system (Flyntz, fig. 

17 2, elem. 31; Angelo, fig. 1:130; 3:29-65 - as shown, the source is external to the 

18 computer system). 
19 

20 Regarding claim 52, the combination of Flyntz and Angelo discloses: 
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1 disapproving the authentication at the microcontroller responsive to the security 

2 data being evaluated as unacceptable (Flyntz, col. 2, lines 53-57; col. 10, lines 33-37; 

3 15:21-65). 
4 

5 Regarding claim 53, the combination of Flyntz and Angelo discloses wherein 

6 evaluating the security data comprises requesting an indication of acceptability inside 

7 SMM (Angelo, Abstract; col. 6, lines 44-50; col. 5: 21-30; col. 1 1 , lines 1 7-45). 
8 

9 Regarding claim 54, the combination of Flyntz and Angelo discloses: 

10 wherein requesting security data from a security device comprises requesting the 



1 1 security data from the security device over a direct connection between the security 

12 dew'ce and the microcontroller; and wherein receiving the security data from the security 

1 3 device, at the microcontroller, comprises receiving the security data from the security 

1 4 device over the direct connection to the microcontroller (Flyntz, fig. 2, elem. 31 , 32). 

15 The combination of Flyntz and Angelo discloses a direct connection between the 

16 security device and the microcontroller. 
17 

18 Regarding claim 55, the combination of Flyntz and Angelo discloses: 

1 9 wherein requesting security data from a security device comprises requesting 

20 biometric data from a biometric device; wherein receiving the security data from the 

21 security device, at the microcontroller, comprises receiving the biometric data from the 
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1 biometric device, at the microcontroller (Flyntz, col. 2, lines 52-56; col. 1 5, lines 5-20, 

2 33-36, 53-55; col. 6, lines 36-46). 

3 wherein evaluating the security data comprises evaluating the biometric data; 

4 and wherein approving the authentication responsive to the security data being 

5 evaluated as acceptable comprises approving the authentication responsive to the 

6 biometric data being evaluated as acceptable (Flyntz, col. 2, lines 52-56; col. 15, lines 

7 5-20, 33-36, 53-55; col. 6, lines 36-46; col. 10, lines 33-40). 
8 



9 Regarding claims 56 - 65, they are the method steps and method implemented 

10 on computer readable medium claims corresponding to the method claims above, and 

1 1 are rejected, at least, for the same reasons. 
12 

13 

1 4 Response to Arguments 

15 

16 Applicant's arguments filed 8/24/07 have been fully considered but they are not 

17 persuasive. 
18 

1 9 Applicant argues or asserts primarily that: 

20 

21 ( i ) "...data structures and computer programs which impart functionality when 

22 employed as a computer component"--is generally statutory when "recorded on a 



Application/Control Number: 10/084,596 Page 12 

Art Unit: 2137 

1 computer-readable medium". . . . The rejections of claims 61-65 as non- statutory subject 

2 matter under 35 U.S. C. § 101 are therefore erroneous. Each of claims 61-65 recites 

3 statutory subject matter. (Remarks, pg. 7) 
4 

5 In response, the examiner respectfully notes that instructions embodied upon a 

6 signal- would not be "generally statutory". The applicant fails to limit the claim scope to 

7 statutory subject material, thus claims 61 - 65 are rejected as not being statutory. 
8 

9 (ii) The authentication request is not received over an external bus and from a 

1 0 source remote from the computer system. ...A user interfacing with the computer 

1 1 system via the keyboard is not remote with respect to the computer system, but rather 

1 2 directly interfacing with the computer system. . . . Therefore Heinrich teaches away from 

13 authenticating remote requests. (Remarks, pg. 8) 
14 

1 5 In response, the examiner respectfully notes that the applicant forms an 

16 unfounded assertion of equivalency between "not remote" and "directly interfacing". It is 

17 respectfully noted as lacking within the applicant's assertions, a rational basis for 

1 8 concluding that a source interfacing directly or indirectly would somehow qualify a 

1 9 source as being remote or not remote. Applicant's arguments fail to comply with 37 

20 CFR 1 . 1 1 1 (b) because they amount to a general allegation that the claims define a 

21 patentable invention without specifically pointing out how the language of the claims 

22 patentably distinguishes them from the references. 
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1 Furthermore, the examiner respectfully notes that the claims in question are 

2 rejected, not as being obvious in view of, but as being anticipated by the prior art. 

3 Therefore, the examiner does not find persuasive the applicant's argument that the prior 

4 art teaches away from authenticating remote requests. 
5 

6 (ii) Taken as a whole, the combination of Flyntz and Angelo fails to teach or suggest 

7 receiving a request for an authentication at a microcontroller included in a bridge over a 

8 bus external to the bridge from a source remote from the computer system and 

9 approving the authentication at the microcontroller responsive to security data being 

1 0 evaluated as acceptable. Flyntz is not directed to remote authentication requests and 

1 1 Angelo fails to correct this defect. (Remarks, pg. 8,9) 
12 

1 3 In response, the examiner notes that the combination shows " a source remote 

14 from the computer system " (see at least Angelo, 3:29-65). Applicant's arguments fail to 

1 5 comply with 37 CFR 1 . 1 1 1 (b) because they amount to a general allegation that the 

16 claims define a patentable invention without specifically pointing out how the language 

17 of the claims patentably distinguishes them from the references. Specifically, though 

18 the applicant makes an assertion, the applicant fails to present a rational argument to 

19 distinguish the recitation of "remote" from the disclosure of the prior art. 
20 

21 Conclusion 
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1 Claims 51 - 65 are rejected. 
2 

3 The prior art made of record and not relied upon is considered pertinent to 

4 applicant's disclosure: 
5 

6 See Notice of References Cited. 

7 

8 A shortened statutory period for reply is set to expire 3 months (not less than 90 

■ 9 days) from the mailing date of this communication. 

1 0 THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 

1 1 policy as set forth in 37 CFR 1 . 1 36(a). 

1 2 A shortened statutory period for reply to this final action is set to expire THREE 



1 3 MONTHS from the mailing date of this action. In the event a first reply is filed within 

14 TWO MONTHS of the mailing date of this final action and the advisory action is not 

1 5 mailed until after the end of the THREE-MONTH shortened statutory period, then the 

16 shortened statutory period will expire on the date the advisory action is mailed, and any 

1 7 extension fee pursuant to. 37 CFR 1 . 1 36(a) will be calculated from the mailing date of 

1 8 the advisory action. In no event, however, will the statutory period for reply expire later 

1 9 than SIX MONTHS from the mailing date of this final action. 

20 Any inquiry concerning this communication or earlier communications from the 

21 examiner should be directed to Jeffery Williams whose telephone number is (571 ) 272- 

22 7965. The examiner can normally be reached on 8:30-5:00. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 



2 supervisor, Emmanuel Moise can be reached on (571) 272-3865. The fax phone 

3 number for the organization where this application or proceeding is assigned is (703) 

4 872-9306. 



6 Patent Application Information Retrieval (PAIR) system. Status information for 

7 published applications may be obtained from either Private PAIR or Public PAIR. 

8 Status information for unpublished applications is available through Private PAIR only. 

9 For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

10 you have questions on access to the Private PAIR system, contact the Electronic 

1 1 Business Center (EBC) at 866-21 7-91 97 (toll-free). 
12 

13 

14 J.Williams 

15 AU2137 
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